Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: bCZ5143Xhtmtxd5YYX4//Bo/5vSAWSl+MIpDKotYncw=
Subject key identifier: 23:28:13:74:39:C7:D3:EE:99:BF:57:8E:08:A3:D8:A7:70:74:14:88
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 01961020AFA1D07C2823869EF5BCA59D5A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 12:01:39 +0000
Manifest this update: Mon 07 Apr 2025 12:01:39 +0000
Manifest next update: Tue 08 Apr 2025 12:01:39 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: zCJvU+Uy4hg91cOHDtx/QA4roBcvCbcV4auWiEzpxkA=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:af:a1:d0:7c:28:23:86:9e:f5:bc:a5:9d:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Apr 7 12:01:39 2025 GMT
Not After : Apr 8 12:01:39 2025 GMT
Subject: CN=2328137439c7d3ee99bf578e08a3d8a770741488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:0f:3f:30:07:2a:34:b3:6b:4d:88:83:23:
ba:f1:e0:a0:e8:b9:a7:b8:51:c5:2b:be:05:9a:60:
c3:b0:71:91:63:30:f1:1d:db:3f:c7:cf:08:aa:14:
0e:95:e8:7e:f3:52:8e:e9:53:d6:18:bb:23:d2:78:
75:e3:65:a9:d9:75:8a:c3:57:7f:a5:d9:06:94:5e:
54:4c:cd:b6:78:f8:dc:35:2b:12:6c:01:9a:1a:7a:
1a:0b:28:20:3d:02:60:5d:24:51:43:01:18:e3:e1:
c6:d7:d6:3f:d9:e0:c0:07:18:ac:db:c1:a6:d2:e5:
a8:9c:f9:e7:9b:ec:dc:72:22:5b:d9:63:52:af:6d:
e5:5a:34:9d:c3:24:31:8a:e3:4f:ee:42:e3:ea:53:
10:3b:83:76:bb:6a:7c:2d:c8:b0:6e:c3:cf:8b:42:
34:9e:2a:b5:6f:ab:a4:36:2e:2c:63:4f:0a:f6:7c:
b9:e5:3f:39:30:15:69:05:62:aa:a4:98:ae:f3:18:
f3:a4:fb:1f:92:fd:6f:58:e0:ab:4d:ad:01:bc:c6:
0e:9c:d8:05:5c:7e:28:75:aa:fb:20:bb:05:98:1e:
a4:10:a3:96:05:c9:42:5f:b9:08:d0:98:fb:3d:a8:
10:ac:34:03:00:7c:1c:40:7d:31:98:99:bf:b4:d9:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:13:74:39:C7:D3:EE:99:BF:57:8E:08:A3:D8:A7:70:74:14:88
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:4d:e5:09:38:df:0e:ad:75:83:47:d9:c4:62:59:fb:a4:
2d:61:93:62:0c:44:93:3d:a6:7b:f6:89:eb:ab:50:07:d4:77:
8a:31:10:f6:e2:41:b9:c0:94:48:c3:1b:b2:b9:39:50:3d:1e:
d8:ea:70:3a:91:7a:5d:e1:80:f4:62:fe:e2:9d:1f:c9:44:7e:
ae:38:e9:70:02:ae:81:96:9d:dc:21:e1:e1:30:c5:16:ba:36:
70:16:b8:f6:09:cf:bd:03:f9:90:a2:3b:01:25:29:7b:b0:65:
65:c4:94:03:ab:f1:23:21:92:6d:3e:bc:73:dd:4b:c4:3b:65:
b4:09:68:52:41:9a:1d:97:ef:e6:38:c5:8f:20:2b:2e:6e:4f:
02:51:5d:d4:a3:fd:f7:e5:b6:9c:eb:1e:9b:50:22:cc:7e:a0:
33:9b:5d:ca:71:09:18:0f:1a:18:cf:c2:a7:3c:00:7f:be:ef:
5c:77:a3:82:a8:47:ac:19:7f:b1:01:6c:3b:9f:f2:89:3e:ce:
fb:01:4a:11:14:50:1f:aa:d3:5a:a4:24:89:55:bb:bf:1f:ba:
00:cd:dc:50:9e:23:c8:f6:92:f2:e5:97:80:49:c0:92:55:ec:
74:b7:d0:c9:9f:41:91:e0:9a:72:61:4c:6b:44:90:6f:f0:2a:
0f:93:00:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQIK+h0HwoI4ae9bylnVpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjUwNDA3MTIwMTM5WhcNMjUwNDA4MTIwMTM5WjAzMTEwLwYDVQQD
EygyMzI4MTM3NDM5YzdkM2VlOTliZjU3OGUwOGEzZDhhNzcwNzQxNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz0PPzAHKjSza02IgyO68eCg6Lmn
uFHFK74FmmDDsHGRYzDxHds/x88IqhQOleh+81KO6VPWGLsj0nh142Wp2XWKw1d/
pdkGlF5UTM22ePjcNSsSbAGaGnoaCyggPQJgXSRRQwEY4+HG19Y/2eDABxis28Gm
0uWonPnnm+zcciJb2WNSr23lWjSdwyQxiuNP7kLj6lMQO4N2u2p8LciwbsPPi0I0
niq1b6ukNi4sY08K9ny55T85MBVpBWKqpJiu8xjzpPsfkv1vWOCrTa0BvMYOnNgF
XH4odar7ILsFmB6kEKOWBclCX7kI0Jj7PagQrDQDAHwcQH0xmJm/tNk8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMoE3Q5x9Pumb9Xjgij2KdwdBSIMB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ1N5Qk4
3w6tdYNH2cRiWfukLWGTYgxEkz2me/aJ66tQB9R3ijEQ9uJBucCUSMMbsrk5UD0e
2OpwOpF6XeGA9GL+4p0fyUR+rjjpcAKugZad3CHh4TDFFro2cBa49gnPvQP5kKI7
ASUpe7BlZcSUA6vxIyGSbT68c91LxDtltAloUkGaHZfv5jjFjyArLm5PAlFd1KP9
9+W2nOsem1AizH6gM5tdynEJGA8aGM/CpzwAf77vXHejgqhHrBl/sQFsO5/yiT7O
+wFKERRQH6rTWqQkiVW7vx+6AM3cUJ4jyPaS8uWXgEnAklXsdLfQyZ9BkeCacmFM
a0SQb/AqD5MA8A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:35 2025 by rpki-client